無法從Kubernetes上的私有Docker Hub注冊表中提取

Question

我正在Google容器引擎上運行k8集群。 我無法從私人docker存儲庫中提取圖像。

嘗試啟動時，我得到以下信息：

 Name: ds-expected-date Namespace: default Node: gke-ds-cluster-1-default-pool-8980b100-l64j/10.132.0.3 Start Time: Wed, 24 May 2017 13:24:11 +0100 Labels: <none> Annotations: kubernetes.io/limit-ranger=LimitRanger plugin set: cpu request for container ds-expected-date-flask Status: Pending IP: 10.40.0.23 Controllers: <none> Containers: ds-expected-date-flask: Container ID: Image: fluidy/ds-expected-date:latest Image ID: Port: State: Waiting Reason: ImagePullBackOff Ready: False Restart Count: 0 Requests: cpu: 100m Environment: <none> Mounts: /var/run/secrets/kubernetes.io/serviceaccount from default-token-h340m (ro) Conditions: Type Status Initialized True Ready False PodScheduled True Volumes: default-token-h340m: Type: Secret (a volume populated by a Secret) SecretName: default-token-h340m Optional: false QoS Class: Burstable Node-Selectors: <none> Tolerations: <none> Events: FirstSeen LastSeen Count From SubObjectPath Type Reason Message --------- -------- ----- ---- ------------- -------- ------ ------- 21s 21s 1 default-scheduler Normal Scheduled Successfully assigned ds-expected-date to gke-ds-cluster-1-default-pool-8980b100-l64j 18s 18s 1 kubelet, gke-ds-cluster-1-default-pool-8980b100-l64j spec.containers{ds-expected-date-flask} Normal BackOff Back-off pulling image "fluidy/ds-expected-date:latest" 18s 18s 1 kubelet, gke-ds-cluster-1-default-pool-8980b100-l64j Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "ds-expected-date-flask" with ImagePullBackOff: "Back-off pulling image \\"fluidy/ds-expected-date:latest\\"" 20s 6s 2 kubelet, gke-ds-cluster-1-default-pool-8980b100-l64j spec.containers{ds-expected-date-flask} Normal Pulling pulling image "fluidy/ds-expected-date:latest" 19s 5s 2 kubelet, gke-ds-cluster-1-default-pool-8980b100-l64j spec.containers{ds-expected-date-flask} Warning Failed Failed to pull image "fluidy/ds-expected-date:latest": Error response from daemon: unauthorized: authentication required 19s 5s 2 kubelet, gke-ds-cluster-1-default-pool-8980b100-l64j Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "ds-expected-date-flask" with ErrImagePull: "Error response from daemon: unauthorized: authentication required" 

我已按照docs頁面上的所有說明進行操作。 我確信我的注冊表機密已被讀取-如果我在其中輸入duff憑據，則錯誤將更改為“無效的用戶名或密碼”。

Answer 1

您尚未將群集配置為使用憑據從Docker Hub中提取私有映像。

閱讀並應用此指南： https : //kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/

Google容器引擎可以自動從Google容器注冊表（ http://gcr.io ）中提取信息，考慮使用該方法而無需從私有注冊表中提取圖像。